PrivateMAIL
The e mail service to exchange
messages and attachments
in total security.
Product facts
Version 2.0 - 2009

What is it
PrivateMAIL is the e-mail service offered by KHAMSA that lets you With PrivateMAIL you can:
exchange e-mail and attachments with the highest standard of
security. • Send encrypted e-mails and attachments, which can be opened
by the recipient only through a password agreed upon with
It is a sophisticated encryption system that integrates several layers the sender;
of security and through cryptographic means, makes messages and
attachments unreadable for everyone else other than the sender • Receive e-mails that are automatically encrypted and stored on
and the intended recipient of the message. our secure server within the Swiss territory;
Messages are protected both when traveling through the Internet, • Manage several addresses (identities), to improve management
and when stored on the servers. of your business.
Messages are decrypted only for the recipients viewing, and when All this, without requiring the recipient of the message to
the PC is closed, messages are deleted from the PC and stored in install anything, or subscribe to the same service.
an encrypted form on a primary secured server.
1

Many needs.
One solution: PrivateMAIL
The PrivateMAIL service is available in many different versions,
so it will always be able to meet your individual needs of
Available versions:
confidentiality. From single users, to professional firms, to
multinational corporations, we will have a solution that fits. PrivateMAIL Professional
The available packages offer one or many e-mail addresses, both
on our e-mail domains and on the customers’ domains.
PrivateMAIL Business
Solutions are available for work groups or freelancers who need PrivateMAIL Fid
more than one e-mail address. This confidential e-mail
management is ideal for professional, law and fiduciary
companies since it enhances the efficiency of managing
customers.
Custom made solutions are available for special security needs.
KHAMSA experts are always willing ready to help customers find
the most suitable and cost effective solution.
2

PrivateMAIL Professional
Confidential communications require a dedicated tool.
This is the ideal solution for those in need of an e mail address from
which they can send messages to anyone with an absolute guarantee
of confidentiality.
PrivateMAIL Professional provides an e mail address for confidential
messaging:
you@privatemail.ch
The software functions in a simple way:
Outgoing e-mails: encrypted, with the option of you deciding on
a password or letting the system generate one automatically. E mails will
travel through the Internet with highest possible security.
Incoming e mails: encrypts automatically as soon as they are
delivered to your inbox, even if they were sent from addresses outside
of the PrivateMAIL system.
3

PrivateMAIL Business
When your business needs grow, PrivateMAIL offers solutions for work
groups to access several e mail addresses, even in a shared mode.
The Business solution integrates multiple accounts, with
extra support for:
• Several e mail addresses;
• Several users, with different workstations.
Differentiated and configurable access policies let you define which
addresses should be available for each user.
You can choose a domain completely dedicated to you or you can choose
one of the several currently available domains.
PrivateMAIL Business is especially dedicated to professional firms and
small and medium enterprises.
5

PrivateMAIL Fid
The ideal business communication solution for legal, This address can even be not encrypted, if your main
publications, financial and banking management teams, interest is the protection of identity and you don’t want
offering a wide range of unique tools and solutions. your recipient to do the decrypting procedure.
In this case:
A control panel will be at the disposal of the consultant
in order to manage the most advanced and sophisticated • Outgoing e-mail: are not ciphered, to be
e-mail system on the market. unrecognizable from ordinary emails. The recipient
views the e-mail exactly as a standard message
As the ultimate tool in prevention of human errors, without learning that sender is using a special email
PrivateMAIL Fid totally fulfils the needs of the more system.
demanding customers.
BUT
The Fid package offers the possibilities to send
encrypted e-mails, protect the sender’s identity and • Incoming e-mail: are all automatically ciphered one
choose the initial localization of the e-mails. by one as they enter your inbox, also if they are sent
from addresses outside of the PrivateMAIL system.
In addition, PrivateMAIL Fid presents the interesting
Corporate Identity option. The details of the PrivateMAIL Fid offer are only available
on demand.
In this case the e-mail address, supplied with a domain
requested by the client, cannot be traced back to its user,
creating maximum guarantee of your confidential
identity.
6

How it works
You activate PrivateMAIL with the activation code you will
receive at the time of purchase.
The service can be used through a secure e mail client (the
PrivateMAIL client, included in the service).
The e mail client can be downloaded from the Internet and
does not require installation. It can also be launched from an
USB thumb drive. It is not tied to one particular PC
workstation, but can be used on several.
Secure deletion of data stored on the PC
At every PC start up the user has to provide authentication
credentials, and when the PC shuts down all sensitive data
and e mails will be deleted from the workstation, however,
this data will be available once again at subsequent logins.
7

The software in action
Using KHAMSA software is easy and immediate. Security is The external recipient of an encrypted message will receive an
discreet and many mechanisms in the software runs e-mail with a link in his ordinary mailbox, telling him that a
automatically, without compromising security. confidential message has been delivered.
Once opened the link, the recipient will be prompted for the
The software works as follows: password, earlier agreed upon with the sender, to open the
message, its attachments and to reply in a secure way.
• Sending a message between internal users (both
PrivateMAIL customers) works like a standard e-mail All users can set up a separate e-mail address where they will
system and is apparently carried out in clear text between receive notifications when a message is received in their
the two secure clients; PrivateMAIL account.
• Sending a message between a PrivateMAIL user and an
external recipient requires the sender to choose a For further information on the security of PrivateMAIL
password for each message and communicate this to the messages, see the web site:
recipient for the message to be readable.
www.privatemail.ch
8

Security
Philip Zimmermann is a leading expert in secure e mail and telephone communications.
KHAMSA embraced Zimmermann’s PGP technology into PrivateMAIL, integrating it with
our servers, a winning combination and the S MIME system, for an usability, that was
lacking in the existing professional communication tools.
Each message is secured by multiple encryption mechanisms both symmetric and
asymmetric or public key based.
Multiple layers of security are applied at the same time:
• filesystem encryption on the servers;
• SSL e TLS encryption of communications with servers;
• per message encryption, both for transmission and storage;
• decoupling log in credentials from e mail addresses;
• data stored locally on PCs deleted with secure methods approved by the USA Department
of Defense;
To be able to offer maximum security, these main features goes hand in hand with the best
possible practice of people who made security their work place, their goals and professional
ambitions.
The used protocols
AES256, RSA4098, TLSv3, S MIME, X509v3, IMAP S (and many more).
9

Visit the privatemail.ch website to get a feel for the service, experiencing secure mail for the first time, or to invite a friend.
You will discover all the innovations and get more information.
www.privatemail.ch
The present document cannot be used, modified, published or copied in any matter or means without prior consent of Khamsa SA.